writeups.xyz / Chained Bug: XML File Upload to XSS to CSRF to Full Account Take Over (ATO)

Submitter : c2a

Date: 6 May 2022

Bounty : undisclosed

Vulnerabilities :

• XSS
• CSRF
• Account Takeover

Programs :

• Undisclosed

Authors :

• Zulfi Al-Farizi

Link :
https://systemweakness.com/chained-bug-xml-file-upload-to-xss-to-csrf-to-full-account-take-over-ato-156409c41b57